Debian Patches

Status for twisted/20.3.0-7+deb11u1

Patch Description Author Forwarded Bugs Origin Last update
CVE-2022-24801-1.patch Some tests for GHSA-c2jg-hw38-jrqq Tom Most <twm@freecog.net> no 2022-03-05
CVE-2022-24801-2.patch Replace obs-fold with a single space Tom Most <twm@freecog.net> no 2022-03-07
CVE-2022-24801-3.patch Strip only spaces and tabs from header values Tom Most <twm@freecog.net> no 2022-03-07
CVE-2022-24801-4.patch Reject non-digit Content-Length Tom Most <twm@freecog.net> no 2022-03-07
CVE-2022-24801-5.patch Test for malformed chunk size and extensions Tom Most <twm@freecog.net> no 2022-03-13
CVE-2022-24801-6.patch Reject malformed chunk sizes Tom Most <twm@freecog.net> no 2022-03-13
CVE-2022-24801-7.patch We should deprecate http.fromChunk Tom Most <twm@freecog.net> no 2022-03-13
0008-sort-option-keys.patch sort-option-keys
Fix flaky twisted.test.test_main.MainTests.test_twisted which fails
if options are not in the same order.

See https://twistedmatrix.com/trac/attachment/ticket/8923.
Free Ekanayaka <freee@debian.org> no 2016-11-26
0009-no-stderr-in-test_ckeygen.patch no-stderr-in-test_ckeygen
Fix an test writing to stderr. See:

https://twistedmatrix.com/trac/ticket/8924
Free Ekanayaka <freee@debian.org> no 2016-11-26
0010-handle-setlocale-test-failure.patch handle-setlocale-test-failure
Gracefully handle setlocale failures during the test suite (e.g
when running in a container).
Free Ekanayaka <freee@debian.org> no 2017-02-18
0010-spurious-failure-in-setup-unit-tests.patch spurious-failure-in-setup-unit-tests Free Ekanayaka <free.ekanayaka@canonical.com> no 2017-08-28
0012-Skip-test-for-empty-cypher-string-openssl-does-not-t.patch Skip test for empty cypher string, openssl does not throw error now Balint Reczey <balint.reczey@canonical.com> no 2018-11-28
0013-Drop-test_givesMeaningfulErrorMessageIfNoCipherMatch.patch Drop test_givesMeaningfulErrorMessageIfNoCipherMatches
with OpenSSL 1.1.1 no ValueError is raised
Balint Reczey <balint.reczey@canonical.com> no 2018-11-28
0015-Fix-tests-to-expect-new-web-request-logging-format.patch Fix tests to expect new web request logging format Balint Reczey <balint.reczey@canonical.com> no 2018-12-04
CVE-2022-21716-3.patch [PATCH] Fix typo. Adi Roiban <adi.roiban@chevah.com> no 2022-02-08
0001-wxpython3.0.patch wxpython3.0
Fix imports from the wx package.
Matthias Klose <doko@debian.org> no 2016-10-20
0002-combinedlog.patch combinedlog
Preserve backward-compatibility in the way the client IP of a request
is logged by the twisted.web HTTP server.

Bug-Debian https://bugs.debian.org/772629
Matthias Klose <doko@debian.org> yes upstream 2016-10-20
0003-sphinx-theme.patch sphinx-theme
Set the sphinx theme.
Matthias Klose <doko@debian.org> no 2016-10-20
0004-localIntersphinx.patch localIntersphinx
Use local copies of object.inv for building documentation.
Free Ekanayaka <free.ekanayaka@gmail.com> not-needed debian 2016-10-21
0005-insecure-pythonpath.patch insecure-pythonpath
Fix vulnerable example of PYTHONPATH.
Free Ekanayaka <free.ekanayaka@gmail.com> no debian 2016-10-21
0006-fix-sphinx-import-path.patch fix-sphinx-import-path
Adjust the import path in the Sphinx configuration file to
match the new source files location (src/).
Free Ekanayaka <freee@debian.org> no 2016-11-04
0016-Try-exec-ing-ckeygen3-if-ckeygen-was-not-found.patch Try exec'ing ckeygen3 if ckeygen was not found
The ckeygen binary is named ckeygen3 "now".
Sergio Durigan Junior <sergiodj@debian.org> not-needed 2021-02-12
0017-Add-digestmod-parameter-to-HMAC.__init__-invocations.patch Add digestmod parameter to HMAC.__init__() invocations
This parameter is now required on Python 3.8+
Craig Rodrigues <rodrigc@crodrigues.org> no upstream, https://github.com/twisted/twisted/commit/f58c702dac599695bbe9a3e047f8550e11274cdc 2020-04-12
0018-Make-the-twisted-tests-work-when-pyOpenSSL-deletes-N.patch Make the twisted tests work when pyOpenSSL deletes NPN Alex Gaynor <alex.gaynor@gmail.com> no upstream, https://github.com/twisted/twisted/commit/895a9a0c7141646847a8c798f695c92e543af035 2020-08-03
0019-Replace-base64.-string-functions-to-fix-py3.9-suppor.patch Replace base64.*string() functions to fix py3.9 support
Replace base64.decodestring() and .encodestring() functions as they
were deprecated since Python 3.1 in favor of (equivalent) .decodebytes()
and .encodebytes(), and were eventually removed in Python 3.9.

While at it, replace most of their uses with base64.b64encode()
and .b64decode() that are preferable to the former wrt ticket #6446,
and they do not introduce line breaks that the twisted code usually
discarded.

Use .decodebytes() and .encodebytes() in DirDBM as it seems to rely
on the exact presence of newlines, and changing that would break
backwards compatibility.

Submitted by: Michal Gorny <mgorny@gentoo.org>
Michal Gorny <mgorny@gentoo.org> no upstream, https://github.com/twisted/twisted/commit/69e2838d441dde8cf20fa1aabb78de97e2d18343 2020-06-20
0020-Fix-imap4-utf-7-codec-lookup-function-for-Python-3.9.patch Fix imap4-utf-7 codec lookup function for Python 3.9
Python 3.9 normalizes the codec name into 'imap4_utf_7' rather than
'imap4-utf-7', and therefore the lookup function needs to account
for the former name. Transform the latter locally to preserve support
for all Python versions.

Submitted by: Michal Gorny <mgorny@gentoo.org>
Michal Gorny <mgorny@gentoo.org> no upstream, https://github.com/twisted/twisted/commit/b05a5b57cd07af2fe6899b7aefa5a42737919419 2020-06-20
0021-Merge-9652-wiml-mktime-Allow-mktime-to-raise-EOVERFL.patch Merge 9652-wiml-mktime: Allow mktime() to raise EOVERFLOW if isdst=1 and there's no DST.


The mktime() call in versions of glibc starting with 2.28 will return
EOVERFLOW if asked to interpret a tuple whose isdst field is 1 in
timezones that don't observe Daylight Savings Time. We now accept that
mktime() *either* ignores isdst in those timezones *or* raises
EOVERFLOW, both of which appear to be legal behavior.
Wim Lewis <wiml@hhhh.org> no upstream, https://github.com/twisted/twisted/commit/9537671a8b507e46ca02af08f4e69e5462b69664 2020-05-31
0022-increase-size-of-FFDH-keys-for-conch-testing.patch increase size of FFDH keys for conch testing Paul Kehrer <paul.l.kehrer@gmail.com> no upstream, https://github.com/twisted/twisted/commit/d3a97b7f9e536af0103940afe670817fd2ff1393 2020-11-28
0023-Merge-9801-rodrigc-cgi-Change-import-of-cgi.parse_qs.patch Merge 9801-rodrigc-cgi: Change import of cgi.parse_qs to urllib.parse.parse_qs Craig Rodrigues <rodrigc@FreeBSD.org> no upstream, https://github.com/twisted/twisted/commit/adc0a9a494e52211778b158f6748e6b55809c55a 2020-04-13
0024-fixed-corrupted-iqmp-value-in-test-RSA-key.patch fixed corrupted iqmp value in test RSA key Alex Gaynor <alex.gaynor@gmail.com> no upstream, https://github.com/twisted/twisted/commit/9318b60fca5752f351cadd978ef6aa2e743d38ab 2020-07-18
0025-Skip-failing-twisted.web.test.test_http.QueryArgumen.patch skip failing twisted.web.test.test_http.QueryArgumentsTests.testParseqs

https://github.com/twisted/twisted/pull/1523
Thomas Grainger <tagrain@gmail.com> no 2021-02-23
CVE-2022-21712-1.patch [PATCH] failing test for header data leak Glyph <glyph@twistedmatrix.com> no 2022-01-23
CVE-2022-21712-2.patch [PATCH] assert on correct host Glyph <glyph@twistedmatrix.com> no 2022-01-23
CVE-2022-21712-3.patch [PATCH] tests for domain/port/scheme and fix Glyph <glyph@twistedmatrix.com> no 2022-01-23
CVE-2022-21712-4.patch [PATCH] topfile Glyph <glyph@twistedmatrix.com> no 2022-01-23
CVE-2022-21712-5.patch [PATCH] reblackening Glyph <glyph@twistedmatrix.com> no 2022-01-23
CVE-2022-21712-6.patch [PATCH] oops Glyph <glyph@twistedmatrix.com> no 2022-01-23
CVE-2022-21712-7.patch [PATCH] tell mypy enough that it can actually find bugs Glyph <glyph@twistedmatrix.com> no 2022-01-23
CVE-2022-21712-8.patch [PATCH] really need to fix my editor to agree with our black / isort config Glyph <glyph@twistedmatrix.com> no 2022-01-23
CVE-2022-21712-9.patch [PATCH] lint fix Glyph <glyph@twistedmatrix.com> no 2022-01-23
CVE-2022-21712-10.patch [PATCH] correct docstring to suggest the right order Glyph <glyph@twistedmatrix.com> no 2022-01-23
CVE-2022-21716-1.patch [PATCH] Initial fix for Twisted version string DoS. Adi Roiban <adi.roiban@chevah.com> no 2022-01-24
CVE-2022-21716-2.patch [PATCH] Update after review. Adi Roiban <adi.roiban@chevah.com> no 2022-01-24
CVE-2022-24801-8.patch Correct chunk extension byte validation
Go back to the RFC to figure out the correct allowed ranges.
Tom Most <twm@freecog.net> no 2022-03-27
CVE-2022-24801-9.patch Address review feedback Tom Most <twm@freecog.net> no 2022-04-01
Tests-remove-spurious-test-for-illegal-whitespace-in-xmlns.patch remove spurious test for illegal whitespace in xmlns Glyph <glyph@twistedmatrix.com> no upstream, https://github.com/twisted/twisted/commit/6b4bbf9040abd8e5c8feae026c4a6483c7f72506 2022-03-27

All known versions for source package 'twisted'

Links